List of processing operations subject to the requirement for a data protection impact assessment